Browse CVEs

MEDIUM 6.1 CVE-2024-56328 Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by posting a malicious… Discourse 3.3.3 / 3.4.0+ Fix from $1,6002025-02-04 MEDIUM 6.1 CVE-2025-22602 Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers b… Discourse 3.3.4 / 3.4.0+ Fix from $1,6002025-02-04 CRITICAL 9.1 CVE-2024-49765 Discourse is an open source platform for community discussion. Sites that are using discourse connect but still have local logins enabled could allow… Discourse 3.3.3 / 3.4.0+ Fix from $2,3002024-12-19 MEDIUM 6.1 CVE-2024-52794 Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched i… Discourse 3.3.2 / 3.4.0+ Fix from $1,6002024-12-19 MEDIUM 5.9 CVE-2024-53991EPSS 27% Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use `FileStore::Loca… Discourse 3.3.2 / 3.4.0+ Fix from $1,6002024-12-19 HIGH 8.2 CVE-2024-47773 Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response … Discourse 3.3.2+ Fix from $1,9502024-10-08 MEDIUM 6.1 CVE-2024-47772 Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' browsers by sending a malicious… Discourse 3.3.2 / 3.4.0+ Fix from $1,6002024-10-07 HIGH 8.2 CVE-2024-45051 Discourse is an open source platform for community discussion. A maliciously crafted email address could allow an attacker to bypass domain-based res… Discourse 3.3.2 / 3.4.0+ Fix from $1,9502024-10-07 MEDIUM 6.1 CVE-2024-45303 Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be susce… Calendar 0.5+ Fix from $1,6002024-09-12 MEDIUM 6.1 CVE-2024-39320 Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to inject iframes from any doma… Discourse 3.2.5+ Fix from $1,6002024-07-30 HIGH 7.5 CVE-2024-37299 Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long tag group names can reduce the… Discourse 3.2.5+ Fix from $1,9502024-07-30 MEDIUM 6.1 CVE-2024-37165 Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could lead to an XSS vulnerability … Discourse 3.2.3+ Fix from $1,6002024-07-30 MEDIUM 5.3 CVE-2024-37157 Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta4 on the `beta` and `tests-passe… Discourse 3.2.3 / 3.3.0+ Fix from $1,6002024-07-03 MEDIUM 6.5 CVE-2024-36113 Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch, version 3.3.0.beta3 on the `beta` branch, and version… Discourse 3.2.3 / 3.3.0+ Fix from $1,6002024-07-03 MEDIUM 6.1 CVE-2024-35234 Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch, … Discourse 3.2.3 / 3.3.0+ Fix from $1,6002024-07-03 HIGH 7.5 CVE-2024-35227 Discourse is an open-source discussion platform. Prior to version 3.2.3 on the `stable` branch and version 3.3.0.beta3 on the `tests-passed` branch, … Discourse after 3.2.2 Fix from $1,9502024-07-03 HIGH 7.5 CVE-2024-28242 Discourse is an open source platform for community discussion. In affected versions an attacker can learn that secret categories exist when they have… Discourse 3.2.0 / 3.3.0+ Fix from $1,9502024-03-15 MEDIUM 6.5 CVE-2024-27085 Discourse is an open source platform for community discussion. In affected versions users that are allowed to invite others can inject arbitrarily la… Discourse 3.2.0 / 3.3.0+ Fix from $1,6002024-03-15 MEDIUM 6.5 CVE-2024-27100 Discourse is an open source platform for community discussion. In affected versions the endpoints for suspending users, silencing users and exporting… Discourse 3.2.1 / 3.3.0+ Fix from $1,6002024-03-15 HIGH 7.5 CVE-2024-24827 Discourse is an open source platform for community discussion. Without a rate limit on the POST /uploads endpoint, it makes it easier for an attacker… Discourse 3.2.0 / 3.3.0+ Fix from $1,9502024-03-15 MEDIUM 5.3 CVE-2024-24748 Discourse is an open source platform for community discussion. In affected versions an attacker can learn that a secret subcategory exists under a pu… Discourse after 3.2.0 Fix from $1,6002024-03-15 MEDIUM 5.3 CVE-2024-24817 Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse. Prior… Calendar 0.4+ Fix from $1,6002024-02-22 HIGH 7.2 CVE-2024-23654 discourse-ai is the AI plugin for the open-source discussion platform Discourse. Prior to commit 94ba0dadc2cf38e8f81c3936974c167219878edd, interactio… Ai 2024-02-21+ Fix from $1,9502024-02-21 HIGH 8.1 CVE-2023-46241 `discourse-microsoft-auth` is a plugin that enables authentication via Microsoft. On sites with the `discourse-microsoft-auth` plugin enabled, an att… Microsoft Authentication 2024-02-20+ Fix from $1,9502024-02-21 MEDIUM 5.3 CVE-2024-24755 discourse-group-membership-ip-block is a discourse plugin that adds support for adding users to groups based on their IP address. discourse-group-mem… Group Membership Ip Blocks Patch available Fix from $1,6002024-02-01 MEDIUM 6.1 CVE-2024-23834 Discourse is an open-source discussion platform. Improperly sanitized user input could lead to an XSS vulnerability in some situations. This vulnerab… Discourse 3.1.5 / 3.2.0+ Fix from $1,6002024-01-30 HIGH 7.5 CVE-2023-48297 Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@all and @here) which can lead… Discourse 3.1.4+ Fix from $1,9502024-01-12 CRITICAL 9.8 CVE-2023-47121 Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an… Discourse 3.1.3 / 3.2.0+ Fix from $2,3002023-11-10 HIGH 7.5 CVE-2023-47120 Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 throug… Discourse 3.1.3+ Fix from $1,9502023-11-10 MEDIUM 6.1 CVE-2023-47119 Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` an… Discourse 3.1.3 / 3.2.0+ Fix from $1,6002023-11-10